Security Advisory

CVE-2025-46417

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-24 00:00:00
Last updated 2025-04-24 14:51:19
Assigner mitre
State PUBLISHED

Description

The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS after deserialization.